Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139382e302f32342d3234203d3e203631333137.roa
File: 3139332e3130392e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: lFsAi3ZDx0UHtWn3WWqOiw7pw+mWMEnCe1c38lPEg0M=
Subject key identifier: E5:66:07:55:30:3B:F5:47:E4:68:85:38:94:11:9D:E0:47:70:3B:96
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 6E4E9C53F48DC09996B8139A87A4D64C5699481F
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139382e302f32342d3234203d3e203631333137.roa
Signing time: Wed 08 Nov 2023 09:22:28 +0000
ROA not before: Wed 08 Nov 2023 09:17:28 +0000
ROA not after: Wed 06 Nov 2024 09:22:28 +0000
asID: 61317
IP address blocks: 193.109.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 13:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4e:9c:53:f4:8d:c0:99:96:b8:13:9a:87:a4:d6:4c:56:99:48:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:17:28 2023 GMT
Not After : Nov 6 09:22:28 2024 GMT
Subject: CN=E5660755303BF547E468853894119DE047703B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:b3:f4:8b:40:af:34:fd:de:4d:bd:33:d1:
12:da:79:77:11:dc:c3:5d:54:b1:2f:73:82:e6:9f:
5b:30:c6:d6:e9:07:af:ab:ea:2c:28:3e:fb:2e:41:
cc:92:f1:d1:5d:5f:2c:25:c8:23:98:69:90:0f:bc:
12:d0:7d:20:00:fe:62:70:0f:94:2d:92:10:e2:07:
2a:d2:8b:19:38:fd:10:7f:94:d5:c4:71:85:6e:cc:
ba:89:c6:0c:c1:49:67:68:d0:50:e7:f7:f3:20:c9:
7e:48:07:35:01:a5:8c:6c:3f:e0:cf:94:3e:75:f8:
bc:a8:16:25:07:18:b8:60:e6:53:38:29:26:30:cc:
36:03:a2:f9:25:16:db:5a:2e:20:02:8f:cb:f5:6f:
2e:d8:c7:69:f0:cc:f1:44:b1:65:49:78:ee:b3:9d:
17:95:92:eb:b7:ab:30:51:9e:43:6e:45:54:e7:00:
29:c4:ac:bf:0a:4f:0e:5b:7e:5f:dc:e2:1f:d2:d4:
56:b9:53:08:85:8c:8f:18:1c:5e:0a:7c:82:ee:f3:
aa:a4:cd:67:9a:9f:7c:9c:af:92:16:d7:5b:ee:ac:
9d:b9:58:83:59:bb:2d:67:0a:38:33:dd:6e:e6:ef:
50:76:c8:a0:94:ea:70:01:bc:cb:91:62:17:74:19:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:66:07:55:30:3B:F5:47:E4:68:85:38:94:11:9D:E0:47:70:3B:96
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:27:cd:b6:6c:48:24:fb:40:55:88:df:d4:a4:cc:e0:64:55:
ac:9c:a2:47:9c:bb:d1:54:fa:2f:ec:b9:86:5c:7b:db:38:36:
bd:35:b7:17:1d:0d:20:9e:46:fd:82:64:d2:9a:0f:c8:f1:6a:
89:82:32:41:28:3b:a5:ad:a6:ed:bb:ad:13:94:56:d6:8c:7f:
19:e2:4a:ce:9a:31:3d:51:25:40:66:a4:83:73:54:8f:e1:46:
28:5d:2f:46:0c:8d:a1:be:1f:44:3f:d7:fc:ae:83:6d:42:90:
57:98:6c:a3:02:57:05:4f:28:60:9c:a1:79:15:ff:84:f4:28:
8c:31:82:50:d7:46:42:52:39:e9:b5:f3:81:cf:4b:2b:cd:c5:
61:f3:46:af:4a:bc:c8:d5:fb:c8:2f:8d:7d:3c:99:dc:ea:f4:
ec:63:f5:44:d0:2e:1a:ff:b3:e3:9a:87:92:66:fe:c4:12:e8:
38:c2:03:d8:d2:59:3a:77:56:b5:49:24:8d:1d:83:24:e0:37:
cc:73:91:e4:8c:98:ea:ce:d0:46:38:30:42:17:68:df:b5:40:
1c:6b:1a:1e:a1:a6:df:99:43:4a:85:3b:87:1d:02:1a:fc:a2:
d0:5f:d5:db:49:64:f4:01:08:e1:9a:da:80:70:8e:05:14:f0:
c0:30:e0:07
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUbk6cU/SNwJmWuBOah6TWTFaZSB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yMzExMDgwOTE3MjhaFw0yNDExMDYwOTIyMjhaMDMxMTAvBgNV
BAMTKEU1NjYwNzU1MzAzQkY1NDdFNDY4ODUzODk0MTE5REUwNDc3MDNCOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66LP0i0CvNP3eTb0z0RLaeXcR
3MNdVLEvc4Lmn1swxtbpB6+r6iwoPvsuQcyS8dFdXywlyCOYaZAPvBLQfSAA/mJw
D5QtkhDiByrSixk4/RB/lNXEcYVuzLqJxgzBSWdo0FDn9/MgyX5IBzUBpYxsP+DP
lD51+LyoFiUHGLhg5lM4KSYwzDYDovklFttaLiACj8v1by7Yx2nwzPFEsWVJeO6z
nReVkuu3qzBRnkNuRVTnACnErL8KTw5bfl/c4h/S1Fa5UwiFjI8YHF4KfILu86qk
zWean3ycr5IW11vurJ25WINZuy1nCjgz3W7m71B2yKCU6nABvMuRYhd0GTMRAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU5WYHVTA79UfkaIU4lBGd4EdwO5YwHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzOTMzMmUzMTMwMzkyZTMx
MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBbcYwDQYJKoZIhvcNAQELBQADggEBACwnzbZsSCT7QFWI39SkzOBkVaycokec
u9FU+i/suYZce9s4Nr01txcdDSCeRv2CZNKaD8jxaomCMkEoO6Wtpu27rROUVtaM
fxniSs6aMT1RJUBmpINzVI/hRihdL0YMjaG+H0Q/1/yug21CkFeYbKMCVwVPKGCc
oXkV/4T0KIwxglDXRkJSOem184HPSyvNxWHzRq9KvMjV+8gvjX08mdzq9Oxj9UTQ
Lhr/s+Oah5Jm/sQS6DjCA9jSWTp3VrVJJI0dgyTgN8xzkeSMmOrO0EY4MEIXaN+1
QBxrGh6hpt+ZQ0qFO4cdAhr8otBf1dtJZPQBCOGa2oBwjgUU8MAw4Ac=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org